diff --git a/tls.go b/tls.go
index 4c8ef86..d645355 100644
--- a/tls.go
+++ b/tls.go
@@ -137,7 +137,7 @@ func NewRatelimitedConn(conn net.Conn, limit *LimitFallback) net.Conn {
 }
 
 var (
-	size  = 8192
+	size  = recordHeaderLen + maxCiphertextTLS13
 	empty = make([]byte, size)
 	types = [7]string{
 		"Server Hello",